Skip to content
OpenAdvisories

Vendor

jkohlbach

4 known vulnerabilities.

jkohlbach at a glance

Last 12 months
2
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202610
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202610
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers 2 Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce 1 Auto Refresh Single Page 1
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.9
    CVE-2026-16777

    Store Exporter <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion via 'filename' Parameter

    The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.8.0 via the 'filename' parameter parameter. This makes it possible for authent…

    jkohlbach Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers Web / CMS
  • High 8.8
    CVE-2026-3499

    Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce 13.4.6 - 13.5.2.1 - Cross-Site Request Forgery to Multiple Administrative Actions

    The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 through 13.5.2.1. This is due to missing or incorrect nonce validation on the ajax_migrate_to_…

    jkohlbach Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce Web / CMS
  • Medium 6.1
    CVE-2024-8793

    Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More <= 2.7.2.1 - Reflected Cross-Site Scripting

    The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up…

    jkohlbach Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers Web / CMS
  • High 8.8
    CVE-2024-1731

    Auto Refresh Single Page <= 1.1 - Authenticated (Contributor+) PHP Object Injection

    The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1 via deserialization of untrusted input from the arsp_options post meta option. This makes it possible for authenticated attackers…

    jkohlbach Auto Refresh Single Page Web / CMS